In a survey of 500 worldwide cybersecurity leaders, it seems that many do not consider their organisation’s approach to cyber to be effective